Technical Usability Assessment of Security Analysis Tools for Ethereum Based Smart Contracts

被引:0
作者
Zeeshan, Rana [1 ]
Tal, Irina [2 ]
机构
[1] Dublin City Univ, Sch Comp, Dublin, Ireland
[2] Dublin City Univ, Sch Comp, Lero, Dublin, Ireland
来源
2022 IEEE 22ND INTERNATIONAL CONFERENCE ON SOFTWARE QUALITY, RELIABILITY, AND SECURITY COMPANION, QRS-C | 2022年
关键词
Smart contracts; Solidity; Blockchain; Ethere-um; Security Analysis Tools; Vulnerability analysis; Usability study;
D O I
10.1109/QRS-C57518.2022.00021
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
Over the past few years, Ethereum has surfaced as a widely adopted standard Blockchain platform that is increasingly being utilized to develop Decentralized Applications (DApps). By introducing Smart Contracts to software developers and programmers, Ethereum has triggered the development of countless Blockchain solutions. Among its main applications, many involve the exchange of valuable financial assets. Simply put, we cannot afford to base our Blockchain solutions or applications on potentially vulnerable smart contracts. This is where the Security Analysis Tools come into picture, for the timely detection of vulnerabilities in the Smart Contracts. Since this is a recent phenomenon, it offers a lot of research opportunities for us to contribute towards improving the existing state of security analysis tools and resolving their shortcomings. Although most of these tools have been evaluated in terms of effectiveness, installation and reliability; the literature largely lacks the technical usability perspective i.e. execution and evaluation. Therefore, based on a selection criteria, we committed our time to 4 such tools for an extensive usability assessment. We designed our usability study in a manner that combined the advantages of multiple evaluation methods. The results were useful not only in terms of comparative analysis, but also as a validation of the need of identified usability improvements.
引用
收藏
页码:87 / 95
页数:9
相关论文
共 50 条
  • [41] RA: Hunting for Re-Entrancy Attacks in Ethereum Smart Contracts via Static Analysis
    Chinen, Yuchiro
    Yanai, Naoto
    Cruz, Jason Paul
    Okamura, Shingo
    2020 IEEE INTERNATIONAL CONFERENCE ON BLOCKCHAIN (BLOCKCHAIN 2020), 2020, : 327 - 336
  • [42] SECURIFY: Practical Security Analysis of Smart Contracts
    Tsankov, Petar
    Dan, Andrei
    Drachsler-Cohen, Dana
    Gervais, Arthur
    Bunzli, Florian
    Vechev, Martin
    PROCEEDINGS OF THE 2018 ACM SIGSAC CONFERENCE ON COMPUTER AND COMMUNICATIONS SECURITY (CCS'18), 2018, : 67 - 82
  • [43] Vulnerabilities and Excess Gas Consumption Analysis Within Ethereum-Based Smart Contracts for Electricity Market
    Danielius, Paulius
    Stolarski, Piotr
    Masteika, Saulius
    BUSINESS INFORMATION SYSTEMS WORKSHOPS (BIS 2020), 2020, 394 : 99 - 110
  • [44] SKLEE: A Dynamic Symbolic Analysis Tool for Ethereum Smart Contracts (Tool Paper)
    Jain, Namrata
    Kaneko, Kosuke
    Sharma, Subodh
    SOFTWARE ENGINEERING AND FORMAL METHODS, SEFM 2022, 2022, 13550 : 244 - 250
  • [45] Secure smart contracts for cloud-based manufacturing using Ethereum blockchain
    Kumar, Ajay
    Abhishek, Kumar
    Nerurkar, Pranav
    Ghalib, Muhammad Rukunuddin
    Shankar, Achyut
    Cheng, Xiaochun
    TRANSACTIONS ON EMERGING TELECOMMUNICATIONS TECHNOLOGIES, 2022, 33 (04)
  • [46] An Empirical Evaluation of Smart Contract-Based Data Quality Assessment in Ethereum
    Comuzzi, Marco
    Cappiello, Cinzia
    Meroni, Giovanni
    BUSINESS PROCESS MANAGEMENT: BLOCKCHAIN AND ROBOTIC PROCESS AUTOMATION FORUM, BPM 2021 BLOCKCHAIN AND RPA FORUM, 2021, 428 : 51 - 66
  • [47] Towards Effective Static Analysis Approaches for Security Vulnerabilities in Smart Contracts
    Ghaleb, Asem
    PROCEEDINGS OF THE 37TH IEEE/ACM INTERNATIONAL CONFERENCE ON AUTOMATED SOFTWARE ENGINEERING, ASE 2022, 2022,
  • [48] Enhancing Ethereum smart-contracts static analysis by computing a precise Control-Flow Graph of Ethereum bytecode
    Pasqua, Michele
    Benini, Andrea
    Contro, Filippo
    Crosara, Marco
    Dalla Preda, Mila
    Ceccato, Mariano
    JOURNAL OF SYSTEMS AND SOFTWARE, 2023, 200
  • [49] Energy consumption monitoring using private blockchain network based on Ethereum smart contracts
    Ionescu, L. M.
    Mazare, A. G.
    Ionescu, N.
    Lita, A., I
    2022 IEEE 28TH INTERNATIONAL SYMPOSIUM FOR DESIGN AND TECHNOLOGY IN ELECTRONIC PACKAGING (SIITME), 2022, : 132 - 135
  • [50] Blockchain-based Proof of Existence (PoE) Framework using Ethereum Smart Contracts
    Shawn, Lim Wei Ming
    Mohan, Purnima Murali
    Keong, Peter Loh Kok
    Balachandran, Vivek
    PROCEEDINGS OF THE ELEVENTH ACM CONFERENCE ON DATA AND APPLICATION SECURITY AND PRIVACY (CODASPY '21), 2021, : 301 - 303